Privacy Policy

Last updated: 2 September 2026.

1. Data controller

The controller of the data collected on this website is Luis Miguel Pires. For privacy questions or to exercise your rights, contact contato@miguelpires.net.

2. Data collected and purposes

• Contact form: name, email address, subject and message, used to receive and answer your request.
• Newsletter: email address, language, source page, request and confirmation dates, subscription status, and the version and exact wording of the consent, used to confirm and manage news about artworks, exhibitions and workshops.
• Operation and security: the hosting server may process technical connection data, such as IP address, date, time and requested resource, to operate the website and prevent abuse.

3. Legal basis

The newsletter is based on consent. Depending on the content of a contact request, processing is based on steps requested before entering into a contract or on the legitimate interest in responding to communications received. Technical security data is processed on the legitimate interest in protecting and maintaining the website.

4. Recipients and storage

Contact messages are delivered to the mailbox used to manage the website and are not stored in a website database. The newsletter register and active subscriber list are stored in a private hosting directory outside public_html. The hosting provider and recipients' email providers process the data needed to transmit messages. Personal data is not sold.

5. Retention

Contact messages should be deleted from the mailbox within 12 months after the last useful exchange, unless a contractual relationship, legal obligation or the defence of legal rights justifies a different period. An unconfirmed newsletter request is deleted automatically after 7 days. A confirmed subscription remains active for 36 months and then requires a new confirmation. After cancellation, the email address is removed from the active list; a pseudonymised cancellation record is retained for 24 months to prevent accidental reactivation and document the request. The application does not create audience analytics logs. The retention of technical server logs depends on the hosting configuration and must be reviewed periodically with the provider.

6. External services

The website links to social networks and external platforms. Those services receive data only when a visitor chooses to open the relevant link. Fonts are hosted locally, so loading an ordinary page does not require a connection to Google Fonts. The website does not currently use audience analytics, behavioural advertising or other non-essential tracking.

7. Newsletter confirmation and cancellation

An address enters the active list only after the person opens the link received by email and confirms the subscription. The confirmation link expires after 7 days. An individual cancellation link is generated for each active subscriber and must be included in every mailing. Cancellation can also be requested at contato@miguelpires.net.

8. Your rights

Where applicable under the General Data Protection Regulation, you may request access, rectification, erasure, restriction, objection or portability. You may withdraw newsletter consent at any time without affecting prior lawful processing. You may also lodge a complaint with the competent supervisory authority.

9. Security

Technical measures are used to limit unauthorised access, including HTTPS transmission, server-side form validation, email confirmation, protected individual links and newsletter data storage outside the public directory. No system can provide absolute security.

10. Contact

For a privacy question or a request concerning your data, email contato@miguelpires.net.